Last updated：2021-10-29 17:57:41
This topic describes how to create an Identity and Access Management (IAM) user. An IAM user is an identity corresponding to an O&M person or an application.
An IAM user has no permission by default. You need to grant the IAM user permissions to access corresponding resources.
You have logged in as the root user or as an IAM user with the IAMFullAccess permission.
Username: the username of the IAM user. This parameter is required. After the IAM user is created, the username cannot be changed. Display name: the display name of the IAM user. You can define it based on your business requirements. This parameter is required. E-mail: the email address for receiving messages. This parameter is optional. Cellphone number: the phone number for receiving messages. This parameter is optional. Receive message: Specifies whether to receive messages. After it is enabled, the E-mail and Cellphone number parameters are required.
Select an access mode in the Access Mode section. To ensure your account security, we recommend that you select only one access mode.
Console Password Logon: If you select this access mode, you need to set the Console Password, Password Reset, Login Protection, Operation Protection, and Sub-users view all items parameters. Programmatic Access: If you select this access mode, the system automatically generates an AccessKey for the IAM user. The IAM user can access Kingsoft Cloud by using API operations or other development tools.